SOC Analyst II

AMERICAN SYSTEMS

. Provide Tier II cybersecurity support in a Security Operations Center environment .

Posted 10/16/2026full-timeMonterey • California • United StatesMid-LevelSenior💰 $39 - $44 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident detection and response, with a strong focus on vulnerability assessments, threat analysis, and incident management. Proficient in utilizing security tools and methodologies to protect networks and ensure compliance with national standards.

Highest-signal resume keywords

Incident Detection And ResponseMalware AnalysisVulnerability AssessmentSecurity Information And Event Management (SIEM)DoD 8570.01-M Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityThreat IntelligenceIntrusion DetectionNetwork SecurityIncident ResponseVulnerability ManagementMalware IdentificationSecurity Log AnalysisCloud SecurityApplication Security

Soft Skills

CollaborationCustomer ServiceTraining And MentoringCommunicationProblem Solving

Tools & Technologies

JIRAPalo Alto FirewallSNORT IDSAlienVault SIEMBarracuda Mail Spam / Virus FirewallHBSS

Certifications & Qualifications

Top Secret ClearanceIAT Level II CertificationCompTIA CASP+GIAC GCIHMicrosoft AZ-500Microsoft SC-200Splunk Core Certified Advanced Power User

Industry Keywords

Security Operations Center (SOC)Cyber ThreatsNetwork Traffic AnalysisIncident Handling MethodologiesStandard Operating Procedures (SOPs)Network Access ControlCyber Defense PoliciesOSI ModelTCP/IPDHCP

Tech Stack

Tools & technologies

CloudCyber SecurityDNSSplunkTCP/IP

About the role

Key responsibilities & impact

Provide Tier II cybersecurity support in a Security Operations Center environment
Conduct vulnerability assessments
Analyze cyber threats
Monitor the email gateway
Create reports on confirmed or suspicious activities
Collaborate with Tier I and Tier II personnel to provide customer service
Assist with training SOC Analyst I team members
Use intrusion detection technologies to identify host- and network-based intrusions
Create, update, resolve, and document Tier II incident tickets
Review asset discovery and vulnerability assessment data
Lead incidents from alert to resolution using threat intelligence
Collect logs, configurations, running processes, and other asset data for investigation
Direct remediation and recovery efforts, including tasking IHT1
Request engineering, forensics, or threat intelligence support
Brief incident status to the CSOC manager, CISO, DCIO, or CIO
Manage and configure SIEM, IDS, firewall, and access control list tools as needed
Review Tier 1 trouble tickets
Review threat intelligence and create and distribute notifications
Design incident response for cloud service models
Perform damage assessments
Preserve evidence integrity according to SOPs or national standards
Protect networks using NIPS, anti-malware, device restrictions, and spam filters
Categorize vulnerabilities and associated attacks
Secure network communications
Use security event correlation tools
Identify, capture, contain, and report malware
Follow and help update SOC standard operating procedures

Requirements

What you’ll need

U.S. Citizenship required in accordance with 8 U.S.C. 1324b(a)(2)(C)
Active Dept. of War Top Secret Clearance required
At least three (3) years of professional experience in incident detection and response, malware analysis, or cyber forensics
Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field
At least one certification required by DoD 8570.01-M and DoD Directive 8140.01, IAT Level II or higher
At least one additional certification: CompTIA CASP+, GIAC GCIH, Microsoft AZ-500, Microsoft SC-200, or Splunk Core Certified Advanced Power User
Extensive experience with security methodologies, standard operating procedures, processes, and workflows
Experience configuring and implementing technical security solutions
Extensive experience analyzing and trending security log data from numerous heterogeneous security devices
Knowledge of computer networking concepts, OSI model, TCP/IP, DHCP, DNS, directory services, and network security
Knowledge of host/network access control mechanisms
Knowledge of network security architecture concepts
Knowledge of network traffic analysis and packet-level analysis
Knowledge of cyber threats, vulnerabilities, attack stages, attack classes, attackers, and cyber defense policies
Knowledge of incident response and handling methodologies
Knowledge of intrusion detection methodologies and techniques
Knowledge of malware analysis concepts
Knowledge of cloud service models
Knowledge of application security risks, including OWASP Top 10
Knowledge of system administration, network and operating system hardening, and data backup
Knowledge of system and application security threats and vulnerabilities
Experience with JIRA, Palo Alto Firewall, SNORT IDS, AlienVault SIEM, Barracuda Mail Spam / Virus Firewall, and HBSS
Ability to work rotating 24/7 shifts: 10 hours per day, Monday–Thursday or Friday–Monday, rotating every 3 months

Benefits

Comp & perks

Healthcare benefits
Paid leave
Retirement plans
Insurance programs
Education and training assistance
Employee ownership